Static task
static1
Behavioral task
behavioral1
Sample
c4b33aafe7db5c301a3fe615c18dc0dc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c4b33aafe7db5c301a3fe615c18dc0dc.exe
Resource
win10v2004-20240226-en
General
-
Target
c4b33aafe7db5c301a3fe615c18dc0dc
-
Size
16KB
-
MD5
c4b33aafe7db5c301a3fe615c18dc0dc
-
SHA1
aba7840b18aa66c3802c1c022e9db016162e86d2
-
SHA256
2d7f67cef669c93a8099fa845bbb5f613a99137133aa4e55f6ec08ab267182c1
-
SHA512
f5b7a83f021ba47448718a8262fcbea31062dac0674400183ae98e61a05bd5e08a4e442fcb7cefa5330d419bec1f9b1be46180240594c1cebf2f52fbb1a92417
-
SSDEEP
384:oYX3YYznOKXogTeG7brdhGHvnMS+iCpScV:oYXJKKXlH7brdgn3+iCpS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4b33aafe7db5c301a3fe615c18dc0dc
Files
-
c4b33aafe7db5c301a3fe615c18dc0dc.exe windows:4 windows x86 arch:x86
f32859b6df61c45a0005a9035140ef25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleOutputCharacterA
GetVersionExW
CommConfigDialogW
GetModuleHandleA
GetProfileSectionW
GetCompressedFileSizeA
GetTempFileNameA
ReadConsoleInputA
CreateDirectoryA
FindFirstFileExA
GetProfileStringA
GetProfileIntW
GetLongPathNameA
user32
AppendMenuA
LoadCursorFromFileA
CreateAcceleratorTableA
DialogBoxIndirectParamW
wsprintfA
DlgDirListA
OemToCharW
SetDlgItemTextA
LoadKeyboardLayoutW
SetWindowTextA
gdi32
SetICMProfileA
CreateScalableFontResourceA
CreateColorSpaceW
Sections
.rdata Size: - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.share Size: 10KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.share Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fasm Size: 1024B - Virtual size: 863B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ